Dear team,
Can any one help me in getting all the solarwinds events by API
Hi. Not sure about what's your prefered API. Good start point is Home · solarwinds/OrionSDK Wiki · GitHub
So here's example for getting the data(last 24 hours to not to kill your DB) through PowerShell API after the Orion SDK installation(and allowing the scripts execution):
#region PSSnapin presence check/addif (!(Get-PSSnapin -Name "SwisSnapin" -ErrorAction SilentlyContinue)){Add-PSSnapin SwisSnapin -ErrorAction SilentlyContinue}#endRegion$swis = Connect-Swis -Hostname "localhost" -UserName "admin" -Password "123"$query = "SELECT EventID, EventTime, NetworkNode, NetObjectID, NetObjectValue, EngineID, EventType, Message, Acknowledged, NetObjectType, TimeStampFROM Orion.Eventswhere EventTime > ADDHOUR(-24,GETUTCDATE())"Get-SwisData -SwisConnection $swis -Query $query
Am trying to integrate solarwinds with another SIEM tool so i need to send all the events to that SIEM by giving the solarwinds API for events. How i can achieve this one ???
Can you be more specific about what API you are looking for? Diner provided a script that fetches the last 24 hours of events.
Kept this one, will come in handy. Thanks!